ar24-sigma.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of ar24-sigma.vercel.app
This page appears to present itself as an AR24 login portal in French, using the title "Connexion - AR24" and branding associated with secure document delivery and electronic registered mail. The screenshot shows a credential form requesting an email address and password, along with links for password reset and account creation. Referenced assets load from app.ar24.fr, which suggests the page is attempting to resemble or reuse branding from the AR24 service.
Based on the visible content, the site may be intended to let recipients access secured documents allegedly sent through AR24. However, it is hosted on a vercel.app subdomain rather than the referenced ar24.fr infrastructure, which is an important contextual difference. That mismatch can be consistent with a look-alike login page rather than an official customer portal.
Safety Assessment for ar24-sigma.vercel.app
Multiple risk signals were present at the time of this scan. The domain was flagged by 20 out of 91 security engines, with many classifying it as phishing or otherwise malicious. In addition, one phishing-focused threat database listed the URL, and the page itself displays a login form asking visitors to enter their email address and password while visually presenting AR24 branding. The domain name and hosting location do not appear to match the branded service shown on the page, which may indicate an attempt to imitate a legitimate login experience.
There are a few weaker counter-signals: the malware file scan did not detect malicious files in the limited content examined, and the site used a valid TLS certificate at the time of testing. However, those points do not outweigh the stronger phishing indicators. The domain's IP address was also listed on one mail-reputation blocklist, which is a secondary cautionary signal rather than primary evidence on its own.
Based on these findings, this website may pose potential risks to visitors, particularly if asked to enter account credentials or other sensitive information.
Technical Description
The site was served over HTTPS with a valid certificate issued by a mainstream certificate authority, expiring in late 2026. It appears to be hosted on Vercel infrastructure, using Vercel nameservers, with the resolved server IP reported in Atlanta, United States. The domain itself is several years old, which can sometimes add legitimacy context, but age alone does not offset page-level abuse on a hosted subdomain.
DNSSEC appears to be unsigned. No malicious files were flagged in the limited malware scan, and no flagged external links or iframes were reported. The main technical concern is not the TLS setup but the apparent mismatch between the displayed AR24 branding and the vercel.app subdomain hosting the credential form.
Share your experience with this website. Was it safe? Did you encounter any issues?